PUP.Optional.IFEO

Short bio

PUP.Optional.IFEO is a generic detection applied when a PUP blocks another program from running by intercepting it using the Image File Execution Options (IFEO) registry key in Windows.

Type and source of infection

Image File Execution Options are used to intercept calls to an executable. Its intended use is for debugging or replacing applications, but using it as a means to simply stop the executable from executing altogether has been common practice as well.

Protection

Malwarebytes protects users from PUP.Optional.IFEO by blocking the PUPs that create the offending regsitry value.

Remediation

Malwarebytes can detect and remove PUP.Optional.IFEO without further user interaction.

1. Please download Malwarebytes to your desktop.
2. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
3. Then click Finish.
4. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
5. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
6. When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
7. Restart your computer when prompted to do so.

Add an exclusion

When PUP.Optional.IFEO is detected on your computer, Malwarebytes for Windows does not know if it was authorized. Optimization software, malware, and potentially unwanted programs (PUPs) are known to make these types of changes, hence they are regarded as potentially unwanted.

To have Malwarebytes for Windows ignore a PUP.Optional.IFEO, you must add the PUP.Optional.IFEO as an exclusion.

1. Open Malwarebytes for Windows.
2. Click Settings, then click the Protection tab.
3. Scroll down to the bottom.
4. Turn off Automatically quarantine detected malware. Turning this setting off prevents Malwarebytes for Windows from quarantining the PUM automatically.
5. Go to the Dashboard, then click Scan Now.
6. When the Threat Scan Results appear, uncheck the box next to the detected PUP.Optional.IFEO you want to keep.
7. Click Next.
8. On the Remaining Items window, click Ignore Always to add the exclude the detected PUP.Optional.IFEO.
9. Turn on Automatically quarantine detected malware.To find this setting, click Settings > Protection.

When a PUP.Optional.IFEO is excluded, Malwarebytes for Windows does not detect the PUP.Optional.IFEO during scans.

Related blog content

An Introduction to Image File Execution Options
How your business can avoid potentially unwanted programs